Free Isaca CGEIT Exam Questions

Become Isaca Certified with updated CGEIT exam questions and correct answers

Page: 1 / 138

Total 690 Questions | Updated On: Feb 20, 2026

Add To Cart

Question 1

An enterprise has well-designed procurement and vendor risk management policies that are intended to prevent biased decision-making. However, a pattern of ethical violations indicates that vendor selection may have been inappropriately influenced by non-work-related incentives provided to decision makers. Which of the following should be done FIRST in response to this issue?

A : Revise the procurement and vendor risk management policies.

B : Conduct a root cause analysis and remediate based on findings.

C : Document the critical success factors (CSFs) for the procurement policies.

D : Establish and communicate strict penalties for biased vendor selection.

Answer: B

Question 2

Which of the following is the PRIMARY role of the CEO in IT governance?

A : Establishing enterprise strategic goals

B : Managing the risk governance process

C : Evaluating return on investment (ROI)

D : Nominating IT steering committee membership

Answer: A

Question 3

Which of the following would be the BEST way for an IT steering committee to monitor the adoption of a new enterprise IT strategy?

A : Establish key performance indicators (KPIs).

B : Establish key risk indicators (KRIs).

C : Schedule ongoing audit reviews.

D : Implement service level agreements (SLAs)

Answer: A

Question 4

Business management is seeking assurance from the CIO that IT has a plan in place for early identification of potential issues that could impact the delivery of a new application. Which of the following is the BEST way to increase the chances of a successful delivery?

A : Implement a release and deployment plan

B : Ask the application owner to update the risk register

C : Create a baseline configuration of the new application

D : Perform user acceptance testing (UAT)

Answer: A

Question 5

Which of the following would BEST enable an enterprise to ensure selected cloud vendors meet stringent regulatory requirements?

A : Stage gate reviews

B : Risk assessment

C : Internal audit report

D : Third-party audit reports

Answer: D

Page: 1 / 138

Total 690 Questions | Updated On: Feb 20, 2026

Add To Cart